[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cat:01JBSEEDCAT000000000000005":3,"cat-list:01JBSEEDCAT000000000000005:stars:1":15},{"categoryNo":4,"taxonomyType":5,"taxonomyTypeDesc":6,"categoryName":7,"categoryNameEn":8,"description":9,"level":10,"skillCount":11,"parentNo":12,"parentName":13,"children":14},"01JBSEEDCAT000000000000005","SCENARIO","使用场景","邮件与沟通","Communication","邮件、即时消息、内部通讯的撰写与整理",2,1843,"01JBSEEDCAT000000000000001","办公效率",[],{"records":16,"total":11,"current":423,"size":424},[17,40,61,91,123,153,176,213,238,257,277,301,318,334,350,367,379,406],{"skillNo":18,"name":19,"nameZh":20,"description":21,"descriptionZh":20,"repositoryFullName":22,"ownerLogin":23,"ownerAvatarUrl":24,"ownerAccountNo":25,"ownerDisplayName":23,"repositoryNo":26,"starsCount":27,"licenseSpdxId":28,"licenseFileUrl":20,"sourceHtmlUrl":29,"categories":30,"keywords":32,"publishedAt":39},"01M698VYEQF2Z9FB4TWH30T38M","slack",null,"Slack messaging workflows through OpenClaw's message tool.","openclaw\u002Fopenclaw","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","01M698P3FSAZ6B4R928ZF19KPT","01M698PDMDRVH56MV30D253NFP",394302,"MIT","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fextensions\u002Fslack\u002Fskills\u002Fslack\u002FSKILL.md",[31],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[19,23,33,34,35,36,37,38],"messaging","message","tool","slack messaging","workflows","channels","2026-11-10 10:12:30",{"skillNo":41,"name":42,"nameZh":20,"description":43,"descriptionZh":20,"repositoryFullName":22,"ownerLogin":23,"ownerAvatarUrl":24,"ownerAccountNo":25,"ownerDisplayName":23,"repositoryNo":26,"starsCount":27,"licenseSpdxId":28,"licenseFileUrl":20,"sourceHtmlUrl":44,"categories":45,"keywords":47,"publishedAt":39},"01M698VWJKBBDEF0NM9JM7K7ME","block-kit","Use proactively for structured or interactive Slack replies, and when asked to author or validate native Slack Block Kit JSON.","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fextensions\u002Fslack\u002Fskills\u002Fblock-kit\u002FSKILL.md",[46],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[48,49,50,19,51,52,53,54,55,38,56,34,57,58,59,60],"block kit","kit","block","for","use","when","interactive","author","replies","native","json","validate","structured",{"skillNo":62,"name":63,"nameZh":20,"description":64,"descriptionZh":20,"repositoryFullName":22,"ownerLogin":23,"ownerAvatarUrl":24,"ownerAccountNo":25,"ownerDisplayName":23,"repositoryNo":26,"starsCount":27,"licenseSpdxId":28,"licenseFileUrl":20,"sourceHtmlUrl":65,"categories":66,"keywords":71,"publishedAt":39},"01M698SC251PP5YCWAXYMJTDBE","slack-e2e","Test Slack with Convex-leased user OAuth or QA bots; check credentials, exercise owned messages, prove Gateway behavior, and distinguish API evidence from real Slack client interactions.","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fslack-e2e\u002FSKILL.md",[67,68],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":69,"categoryName":70,"taxonomyType":5,"taxonomyTypeDesc":6},"01JBSEEDCAT000000000000008","测试与质量",[72,73,19,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90],"slack e2e","e2e","convex","gateway","bots","evidence","messages","exercise","qa","prove","OAuth","api","check","with","test","credentials","behavior","client","user",{"skillNo":92,"name":93,"nameZh":20,"description":94,"descriptionZh":20,"repositoryFullName":95,"ownerLogin":96,"ownerAvatarUrl":97,"ownerAccountNo":98,"ownerDisplayName":99,"repositoryNo":100,"starsCount":101,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":103,"categories":104,"keywords":106,"publishedAt":39},"01M718JK2B01WZQPFHVHKY25PD","deal-sourcing","PE deal sourcing workflow — discover target companies, check CRM for existing relationships, and draft personalized founder outreach emails. Use when sourcing new deals, prospecting companies in a sector, or reaching out to founders. Triggers on \"find companies\", \"source deals\", \"draft founder email\", \"check if we've seen this company\", or \"outreach to founder\".","anthropics\u002Ffinancial-services","anthropics","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4","01M697XGDPXJAVQ8391V2BCYTE","Anthropic","01M7188Y8CSYMMZ40A4B4N518V",41213,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Ffinancial-services\u002Fblob\u002Fmain\u002Fplugins\u002Fvertical-plugins\u002Fprivate-equity\u002Fskills\u002Fdeal-sourcing\u002FSKILL.md",[105],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[107,108,109,110,111,112,51,113,114,115,116,117,52,118,53,119,120,84,121,122],"sourcing","deal sourcing","deal","target","discover","email","company","triggers","emails","prospecting","new","Existing","workflow","founders","draft","find",{"skillNo":124,"name":125,"nameZh":20,"description":126,"descriptionZh":20,"repositoryFullName":127,"ownerLogin":128,"ownerAvatarUrl":129,"ownerAccountNo":130,"ownerDisplayName":131,"repositoryNo":132,"starsCount":133,"licenseSpdxId":28,"licenseFileUrl":20,"sourceHtmlUrl":134,"categories":135,"keywords":137,"publishedAt":39},"01M6AE5WTR8T3G473AGHXDYYAJ","roundup","Generate personalized status briefings on demand. Pulls from your configured data sources (GitHub, email, Teams, Slack, and more), synthesizes across them, and drafts updates in your own communication style for any audience you define.","github\u002Fawesome-copilot","github","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","01M6AC83DS133TPXFSP1DHNCC6","GitHub","01M6AD3PBDYPK7NVFJNJ66Y8RS",41028,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Froundup\u002FSKILL.md",[136],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[125,138,128,19,112,139,140,141,142,143,144,145,146,147,148,51,149,150,151,152],"communication","generate","teams","status","data","sources","updates","you","across","data sources","drafts","more","define","briefings","style",{"skillNo":154,"name":155,"nameZh":20,"description":156,"descriptionZh":20,"repositoryFullName":127,"ownerLogin":128,"ownerAvatarUrl":129,"ownerAccountNo":130,"ownerDisplayName":131,"repositoryNo":132,"starsCount":133,"licenseSpdxId":28,"licenseFileUrl":20,"sourceHtmlUrl":157,"categories":158,"keywords":160,"publishedAt":39},"01M6ADHEJBEAGCRA3JQ89XZT6J","email-drafter","Draft and review professional emails that match your personal writing style. Analyzes your sent emails for tone, greeting, structure, and sign-off patterns via WorkIQ, then generates context-aware drafts for any recipient. USE FOR: draft email, write email, compose email, reply email, follow-up email, analyze email tone, email style.","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Femail-drafter\u002FSKILL.md",[159],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[112,161,162,163,164,165,166,167,168,51,169,115,52,170,171,121,172,173,152,174,175],"email drafter","workiq","writing","personal","review","writing style","compose","professional","up","tone","analyze","structure","greeting","via","sign",{"skillNo":177,"name":178,"nameZh":20,"description":179,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":187,"categories":188,"keywords":194,"publishedAt":39},"01M6AGAW1B00JCV7Y07F53KE41","testing-for-email-header-injection","Tests web application email functionality (contact forms, password reset, newsletter subscriptions) for CRLF\u002FSMTP header injection using Burp Suite and OWASP ZAP, checking whether attackers can inject headers, modify recipients, or abuse forms for spam relay. Use when testing any user-input-driven email-sending feature during a penetration test.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35884,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-email-header-injection\u002FSKILL.md",[189,190,191],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":69,"categoryName":70,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},"01JBSEEDCAT000000000000023","Skill与智能体开发",[195,196,197,112,198,199,200,201,202,203,204,205,206,207,208,209,210,211,86,212],"testing for email header injection","testing","injection","smtp-injection","crlf-injection","header-injection","spam-relay","contact-form","cybersecurity","t1505","owasp","security","web-application-security","pr","application-security","email-security","t1059","web",{"skillNo":214,"name":215,"nameZh":20,"description":216,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":217,"categories":218,"keywords":222,"publishedAt":39},"01M6AFZA7RY9NXJFVWBNB0ZYTR","performing-phishing-simulation-with-gophish","Deploy and run authorized phishing awareness campaigns with GoPhish, covering admin panel setup, SMTP sending profiles, email template and landing page creation, target user groups, and campaign reporting to measure click and credential-submission rates. Use when planning or executing a phishing simulation for employee security-awareness testing or measuring susceptibility to social engineering.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-phishing-simulation-with-gophish\u002FSKILL.md",[219,220,221],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":69,"categoryName":70,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[223,224,225,226,227,228,196,203,229,230,231,232,233,234,235,236,206,237,208,112],"performing phishing simulation with gophish","phishing","GoPhish","initial-access","t1566","adversary-in-the-middle","create","simulation","security-awareness","website","run","reporting","dmarc","defense","infrastructure",{"skillNo":239,"name":240,"nameZh":20,"description":241,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":242,"categories":243,"keywords":246,"publishedAt":39},"01M6AFRBB5JAGF4PVM8D9RK6V0","performing-dmarc-policy-enforcement-rollout","Execute a phased DMARC rollout by inventorying sending sources, configuring SPF\u002FDKIM alignment, and progressing DNS policy from p=none monitoring through p=quarantine to p=reject enforcement, ensuring all legitimate email sources authenticate before unauthorized senders are blocked. Use when deploying or advancing an organization's DMARC anti-spoofing posture, or when meeting bulk-sender authentication requirements from Google and Yahoo.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-dmarc-policy-enforcement-rollout\u002FSKILL.md",[244,245],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[247,248,235,227,208,112,210,249,203,224,250,251,252,253,254,255,256,236,206],"policy","performing dmarc policy enforcement rollout","authentication","dns","anti-spoofing","monitoring","email-authentication","spf","dkim","google",{"skillNo":258,"name":259,"nameZh":20,"description":260,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":261,"categories":262,"keywords":265,"publishedAt":39},"01M6AFGQPVWS6RRFC54MKB925Q","investigating-phishing-email-incident","Investigates phishing email incidents from initial user report through header analysis, URL\u002Fattachment detonation, impacted user identification, and containment actions using SOC tools like Splunk, Microsoft Defender, and sandbox analysis platforms. Use when a reported phishing email requires full incident investigation to determine scope and impact.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Finvestigating-phishing-email-incident\u002FSKILL.md",[263,264],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[112,224,266,226,227,267,268,203,269,270,271,229,272,232,206,273,274,210,275,276],"investigating phishing email incident","actions","defender","soc","analysis","splunk","t1078","Tools","development","sandbox","containment",{"skillNo":278,"name":279,"nameZh":20,"description":280,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":281,"categories":282,"keywords":288,"publishedAt":39},"01M6AFBBQ536P402BMTJ4V53PW","implementing-proofpoint-email-security-gateway","Deploy and configure Proofpoint Email Protection as a secure email gateway to detect and block phishing, malware, BEC, and spam before messages reach user inboxes.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-proofpoint-email-security-gateway\u002FSKILL.md",[283,284,287],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":285,"categoryName":286,"taxonomyType":5,"taxonomyTypeDesc":6},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[289,206,75,112,290,226,291,227,78,203,292,293,294,295,296,297,298,236,299,300],"implementing proofpoint email security gateway","proofpoint","official","change","secure-email-gateway","anti-spam","anti-malware","customer","email-filtering","secure","malware","email-gateway",{"skillNo":302,"name":303,"nameZh":20,"description":304,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":305,"categories":306,"keywords":309,"publishedAt":39},"01M6AF8A7WX4R6XGMJXA7ZXPJG","implementing-mimecast-targeted-attack-protection","Deploys and configures Mimecast Targeted Threat Protection (TTP) modules -- URL Protect (click-time URL rewriting\u002Fanalysis), Attachment Protect (sandbox detonation), Impersonation Protect (BEC\u002Fwhaling detection), and Internal Email Protect -- for Microsoft 365 or Google Workspace. Use when defending against phishing, spearphishing, or business email compromise, or configuring TTP policies in the Mimecast Administration Console.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-mimecast-targeted-attack-protection\u002FSKILL.md",[307,308],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[310,226,291,227,311,312,203,313,314,229,315,316,232,256,236,206,208,112,274,317],"implementing mimecast targeted attack protection","spearphishing","TTP","mimecast","targeted-threat-protection","url-protect","attachment-sandboxing","google workspace",{"skillNo":319,"name":320,"nameZh":20,"description":321,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":322,"categories":323,"keywords":326,"publishedAt":39},"01M6AF5QP9V1DT761ZNS6TQM3A","implementing-google-workspace-phishing-protection","Configures Google Workspace advanced phishing and malware protection settings in the Admin Console — pre-delivery message scanning, attachment protection, spoofing\u002Fimpersonation detection, and Enhanced Safe Browsing enforcement. Use when hardening Gmail against phishing, spoofing, and malware, or when tuning Workspace email security policies.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-google-workspace-phishing-protection\u002FSKILL.md",[324,325],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[327,256,317,224,226,291,227,203,328,329,251,330,229,232,331,332,333,236,299,206],"implementing google workspace phishing protection","Google-Workspace","safe-browsing","admin-console","safe","tuning","gmail",{"skillNo":335,"name":336,"nameZh":20,"description":337,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":338,"categories":339,"keywords":342,"publishedAt":39},"01M6AF5MGPWYZWKX4VQVHAKNN0","implementing-google-workspace-admin-security","Hardens a Google Workspace tenant via Admin Console configuration: phishing-resistant MFA enforcement, DLP policies, email authentication (SPF\u002FDKIM\u002FDMARC), OAuth third-party app control, and external sharing restrictions. Use when hardening a Google Workspace or G Suite tenant, enforcing MFA and OAuth app controls, or configuring cloud office security administration.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-google-workspace-admin-security\u002FSKILL.md",[340,341],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[343,256,206,317,344,226,227,249,345,346,203,328,347,272,348,254,255,235,349,208],"implementing google workspace admin security","admin","dlp","t1098","admin-security","cloud-security","identity",{"skillNo":351,"name":352,"nameZh":20,"description":353,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":354,"categories":355,"keywords":358,"publishedAt":39},"01M6AF42CEV95W3PSYZ503ZSYC","implementing-email-sandboxing-with-proofpoint","Email sandboxing detonates suspicious attachments and URLs in isolated environments to detect zero-day malware and evasive phishing payloads. Proofpoint Targeted Attack Protection (TAP) is an industry","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-email-sandboxing-with-proofpoint\u002FSKILL.md",[356,357],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[112,359,227,208,360,210,361,362,290,363,203,224,364,365,235,236,299,206,366],"implementing email sandboxing with proofpoint","ZeRO","sandboxing","social-engineering","awareness","suspicious","attachments","engineering",{"skillNo":368,"name":369,"nameZh":20,"description":370,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":371,"categories":372,"keywords":375,"publishedAt":39},"01M6AF3R25NRQE33SF1XC5XVXG","implementing-dmarc-dkim-spf-email-security","Configures SPF, DKIM, and DMARC DNS TXT records to authenticate outbound email, prevent domain spoofing, and enforce a rejection\u002Fquarantine policy on unauthenticated mail, including auditing a domain's current DNS state. Use when hardening a domain's email security posture or defending against phishing and spoofing attacks.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-dmarc-dkim-spf-email-security\u002FSKILL.md",[373,374],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[254,255,235,206,376,112,227,203,250,236,208,210,247,362,363,224,377,378,366],"implementing dmarc dkim spf email security","state","hardening",{"skillNo":380,"name":381,"nameZh":20,"description":382,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":383,"categories":384,"keywords":394,"publishedAt":39},"01M6AF19RKHM3KGCANGMK9CX1J","implementing-canary-tokens-for-network-intrusion","Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access and lateral movement. Integrates with webhook alerting (Slack, Teams, email, generic HTTP) for real-time intrusion notifications. Provides automated token generation, placement strategies, and monitoring for enterprise network environments. Use when building deception-based network intrusion detection with Canarytokens.org and Thinkst Canary platforms.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-canary-tokens-for-network-intrusion\u002FSKILL.md",[385,386,389],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":387,"categoryName":388,"taxonomyType":5,"taxonomyTypeDesc":6},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":390,"categoryName":391,"taxonomyType":392,"taxonomyTypeDesc":393},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[395,396,397,203,398,399,250,400,252,401,272,19,206,237,402,112,403,404,405,140],"network","implementing canary tokens for network intrusion","intrusion-detection","security-operations","canarytokens","alerting","notifications","canary-tokens","real-time","Enterprise","network-security",{"skillNo":407,"name":408,"nameZh":20,"description":409,"descriptionZh":20,"repositoryFullName":180,"ownerLogin":181,"ownerAvatarUrl":182,"ownerAccountNo":183,"ownerDisplayName":184,"repositoryNo":185,"starsCount":186,"licenseSpdxId":102,"licenseFileUrl":20,"sourceHtmlUrl":410,"categories":411,"keywords":414,"publishedAt":39},"01M6AEX2YHRMZ66HHR7S3HNEDG","hunting-for-spearphishing-indicators","Hunt for spearphishing campaign indicators across email logs, endpoint telemetry, and network data to detect targeted email attacks.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fhunting-for-spearphishing-indicators\u002FSKILL.md",[412,413],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":192,"categoryName":193,"taxonomyType":5,"taxonomyTypeDesc":6},[415,311,416,226,227,417,203,418,419,229,232,420,395,142,206,421,112,274,210,422],"hunting for spearphishing indicators","indicators","search","logs","mitre-attack","threat-hunting","endpoint","telemetry",1,18]